Upgrade Rails immediately, kids, this is a big one. github.com/rails/rails/...
Possible arbitrary file read and remote code execution in Active Storage variant processing
### Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process envi...
github.com